Global responsibility for information security, data protection, GMP CSV compliance and IT business continuity management.

Global responsibility for the design and delivery of the information security strategy and program, including for the manufacturing business.

Managed a team responsible for an audit governance across all global IT functions. Identifying and driving IT and security processes and services improvements using lessons learned from root causes identified from internal and external audit findings. Review and approve IT owned remediation closure and extension requests of high-risk audits with IT senior managers, CIO, and CISO teams. Global responsible for SOX IT compliance activities and attestation with external auditors, reporting to group financial compliance office, and IT senior management.

Global responsibility for the identity and access management group policy, controls, operating procedures. Driving IT and business management engagement cross-functionally to improve the IDAM processes and services. IAM technologies (Oracle IAM products, CyberArk, and Strong Authentication).

Responsible to implement the information security framework in the Novartis group functions at the Basel HQ, and at Alcon the Novartis Eye care business unit - now a stand alone business. * Lead and perform security risk assessments, including of third party providers, and projects to comply with cyber security, data privacy and GXP requirements.* Leading IT teams to remediate findings from: internal and external audits, control maturity assessments, penetration testing, secure code reviews, and application and infrastructure vulnerability scanning. * Design and implementation of a vulnerability management solution, enabling aggregation and reporting of application and infrastructure security scanning results from Qualys. * Lead the design and roll out of the global information security exception management process.

Information Security manager for the Pharmaceutical division in two roles: * IT security vulnerability management working with the IT management on remediation guidance, and global reporting to the IGM Head and CIO to agree strategic measures to improve infrastructure security.* As part of the Novartis IT M&A - Mergers and acquisitions team, supported the Pharmaceutical division IT management to deliver on the transaction service agreements in a $3 billion asset swap transactions with GlaxoSmithKline, Eli Lilly, and CSL.

Information security consultant worked for the Information Protection practice within KPMG Technology Risk Consulting Advisory, for global organizations across oil and gas, insurance and financial services, business and technology services, consumer and manufacturing.Projects and technology experience: IT security and project management; application security and database security (tools experience: Veracode, HP Fortify, Imperva); Archer GRC governance risk and compliance implementation; ISO27001 advisory and certification audits; IT and security governance and framework design; identity and access management; data loss prevention; risk assessment and management for projects, IT applications and IT infrastructure; security and financial internal and external audits (ISO27001,ISF, FSA, SAAS 70, SOX, JSOX), third party vendor audits and assessments.